This notice applies to the Pés no Chão festival website at pesnochao.campomaior.pt. It explains how personal data, cookies and external services are used on this website.
1. Who is responsible for personal data
The controller is Município de Campo Maior, Portuguese tax identification number 501 175 229, based at Praça da República, 7370-060 Campo Maior, Portugal. Telephone: +351 268 680 300.
For privacy matters and to exercise your rights, contact the Municipality’s Data Protection Officer at dpo@cm-campo-maior.pt. You can also consult the Municipality’s institutional privacy policy.
2. What data is processed and why
Contact enquiries. When you submit the form, we receive the name, email address, subject and message you provide. We use these details to consider and respond to your enquiry in connection with organising and communicating the festival. Your message is emailed to the authorised team; these enquiries are not used to create a marketing list.
Operation and security. Technical data is processed to operate the website and sessions, protect the form and prevent abusive submissions. The hosting service may keep technical access logs. The submission rate limiter uses an identifier derived from the IP address and the times of submission attempts.
Optional statistics. If you accept, Google Analytics helps analyse website use, including pages viewed, sessions, devices, browser languages and approximate visitor origins. Accepting statistics is not a condition of using the website.
Processing needed for the festival’s institutional activity falls within the Municipality’s cultural responsibilities and the performance of tasks in the public interest, under Article 6(1)(e) GDPR and the applicable legislation governing municipal responsibilities. Article 6(1)(b) may apply where an enquiry concerns steps requested by the individual before entering into a contract. Statistics cookies require consent, which can be withdrawn at any time.
3. Who can access data
Contact data is accessible to people authorised to handle festival enquiries, including necessary email recipients and copied recipients. Hosting, email and technical support providers may also be involved within their assigned functions. Messages are not published on the website.
Google, YouTube and Instagram services may involve processing by external providers and transfers outside the European Economic Area. The services’ terms and GDPR transfer safeguards apply, depending on the service and the relevant agreements. Consult Google’s privacy policy and Instagram’s privacy policy.
4. How long data is kept
Enquiries are kept for as long as necessary to consider, answer and follow up the request. Where they form part of municipal records or proceedings, statutory retention and archiving requirements also apply. The need to retain messages and their copies should be reviewed in light of these purposes and obligations.
Security and access data is kept for the period needed to protect and operate the service, in accordance with hosting rules and applicable obligations. Google’s processing periods depend on the Analytics property settings and service terms. Browser cookie lifetimes, listed below, do not necessarily correspond to the retention of data within that service.
5. Cookies and browser storage
The website uses these mechanisms:
- Technical session — festival_cms_…: a session cookie used to operate and protect the form and authenticated editor access. Its name may vary between installations. This technical cookie uses Secure, HttpOnly and SameSite security attributes. Its browser lifetime is separate from internal login limits.
- Statistics preference — pnc-statistics-consent-v…: a local browser storage record that remembers your choice. Your choice is treated as valid for 180 days, after which you are asked again. The browser may physically retain the record until it is replaced or deleted.
- Google Analytics — _ga and _ga_…: statistics cookies loaded only after acceptance. They are configured to last up to 180 days, without renewing their expiry on every visit. Advertising personalisation and Google Signals are disabled in this integration.
You can accept or decline statistics in the notice and reopen the options through Cookies in the footer. Withdrawing acceptance disables this integration and removes Analytics cookies accessible to the website. This does not retrospectively delete data already received by the provider. You can also manage cookies and storage in your browser settings.
6. Videos, Instagram and other external services
Video covers are served by this website. YouTube and Instagram players are loaded when you request playback. This connects to the selected platform, which may receive technical information and use its own storage mechanisms in accordance with its terms and any existing session you have on that platform.
Accepting statistics is not general permission for all external services. Declining Analytics does not prevent you from subsequently requesting video playback or opening a link to Instagram, Google Maps or Apple Maps. Those platforms’ terms and policies apply to interactions you choose to start.
Festival photographs and videos document its cultural activity. If you have a question about your image in a published record, contact the Municipality or its Data Protection Officer so that the matter can be assessed.
7. Your rights
Where applicable, you may exercise rights of access, rectification, erasure, restriction, objection and portability. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. These rights are subject to legal conditions, including any obligations to retain public records.
Address your request to the Data Protection Officer using the contact above. You may also lodge a complaint with Portugal’s Comissão Nacional de Proteção de Dados.
8. Updates
This information may be revised when the website’s services or practices change. Updates will be made available on this page.